Tag: data
-
DoJ Data Security Program Highlights Data Sharing Challenges
The Department of Justice announced compliance rules for the Data Security Program that will require organizations to reexamine how they do business and with whom. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/doj-data-security-program-data-sharing-challenge
-
iOS and Android juice jacking defenses have been trivial to bypass for years
New ChoiceJacking attack allows malicious chargers to steal data from phones. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/04/ios-and-android-juice-jacking-defenses-have-been-trivial-to-bypass-for-years/
-
Car Subscription Features Raise Your Risk of Government Surveillance, Police Records Show
Records reviewed by WIRED show law enforcement agencies are eager to take advantage of the data trails generated by a flood of new internet-connected vehicle features. First seen on wired.com Jump to article: www.wired.com/story/police-records-car-subscription-features-surveillance/
-
Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools
Government and telecommunications sectors in Southeast Asia have become the target of a “sophisticated” campaign undertaken by a new advanced persistent threat (APT) group called Earth Kurma since June 2024.The attacks, per Trend Micro, have leveraged custom malware, rootkits, and cloud storage services for data exfiltration. The Philippines, Vietnam, Thailand, and Malaysia are among the…
-
React Router Vulnerabilities Allow Attackers to Spoof Content and Alter Values
The widely used React Router library, a critical navigation tool for React applications, has resolved two high-severity vulnerabilities (CVE-2025-43864 and CVE-2025-43865) that allowed attackers to spoof content, alter data values, and launch cache-poisoning attacks. Developers must update toreact-router v7.5.2immediately to mitigate risks. Key Vulnerabilities and Impacts 1.CVE-2025-43864: DoS via SPA Mode Cache Poisoning Attackers could…
-
Blue Shield of California Data Breach Exposes 4.7M Members’ Info
Discover the Blue Shield of California data breach affecting 4.7M members. Learn about the risks and essential security measures to protect your data. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/blue-shield-of-california-data-breach-exposes-4-7m-members-info/
-
Google Cloud Enhances Databases with Firestore and MongoDB Features
Discover Google’s Firestore with MongoDB compatibility, enhancing cloud database functionality with serverless architecture. Explore the future of data storage. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/google-cloud-enhances-databases-with-firestore-and-mongodb-features/
-
IT-Security ist keine Vertrauenssache
G Data warnt davor, die Komplexität heutiger Bedrohungsszenarien zu unterschätzen.Geht es um Cybersicherheit, fühlt sich die Mehrheit der Anwender bei ihren IT-Kollegen gut aufgehoben. Knapp acht von zehn Beschäftigten in Deutschland (78 Prozent) sind überzeugt, dass die IT-Abteilung den aktuellen Anforderungen an eine effektive IT-Sicherheit gewachsen ist. Zu diesem Ergebnis kommt zumindest die Studie ‘Cybersicherheit in…
-
4chan is back online, says it’s been ‘starved of money’
4chan is partly back online after a hack took the infamous image-sharing site down for nearly two weeks. The site first went down on April 14, with the person responsible for the hack apparently leaking data including a list of moderators and “janitors” (one janitor told TechCrunch they were “confident” that the leaked data was…
-
Endpoint Security Policy Template [Download Word]
Protecting your organisation from cyber attacks is crucial. We have seen many companies fall victim to ransomware attacks and data breaches, highlighting the importance of data security in maintaining compliance. Organisations implement many defensive mechanisms to tackle these security threats, such as firewalls and intrusive detection/prevention systems (IDS/IPS). However, implementing only these security measures is……
-
Storm-1977 targets education sector with password spraying, Microsoft warns
Microsoft warns that threat actor Storm-1977 is behind password spraying attacks against cloud tenants in the education sector. Over the past year, Microsoft Threat Intelligence researchers observed a threat actor, tracked as Storm-1977, using AzureChecker.exe to launch password spray attacks against cloud tenants in the education sector. AzureChecker.exe connected to sac-auth[.]nodefunction[.]vip to download AES-encrypted data, which,…
-
GDPR Data Breach Notification Template With Examples [Download]
The GDPR is a law developed by the European Union (EU) to protect individuals’ personal data. Although it originated in the EU, several countries and organisations outside Europe have to date also adopted this regulation, which shows how detailed and well-thought-out it is. Among many of the GDPR’s guidelines, the data breach notification letter is……
-
Security Affairs newsletter Round 521 by Pierluigi Paganini INTERNATIONAL EDITION
Tags: breach, ceo, cybersecurity, data, data-breach, email, group, international, malware, WeeklyReviewA new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. African multinational telco giant MTN Group disclosed a data breach CEO of cybersecurity firm charged with installing malware…
-
Building A Strong Compliance Framework: A CISO’s Guide To Meeting Regulatory Requirements
In the current digital landscape, Chief Information Security Officers (CISOs) are under mounting pressure to ensure their organizations meet a growing array of regulatory requirements while maintaining robust cybersecurity. The proliferation of regulations such as the General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA), and Payment Card Industry Data Security Standard…
-
Stay Ahead in Cloud-Native Security
Is Staying Current in Cloud-Native Security Trends Important? Absolutely! Staying ahead in cloud-native security trends is essential for organizations of all sizes and across various industries. Non-Human Identities (NHIs) and their secrets are fundamental to these trends, requiring expertise in data management and cybersecurity for effective protection and oversight. What are Non-Human Identities and why……
-
Datatonic Acquires Syntio to Strengthen Global Data and AI Service Capabilities
First seen on scworld.com Jump to article: www.scworld.com/news/datatonic-acquires-syntio-to-strengthen-global-data-and-ai-service-capabilities
-
African multinational telco giant MTN Group disclosed a data breach
African multinational telecommunications company MTN Group disclosed a data breach that exposed subscribers’ personal information. MTN Group Limited is a South African multinational telecommunications company headquartered in Johannesburg. Founded in 1994, it has grown to become Africa’s largest mobile network operator, serving over 290 million subscribers across 18 countries in Africa and the Middle East.…
-
Gamers Beware! New Attack Targets Gamers to Deploy AgeoStealer Malware
Tags: attack, credentials, cyber, cybersecurity, data, encryption, exploit, intelligence, malware, threatThe cybersecurity landscape faces an escalating crisis as AgeoStealer joins the ranks of advanced infostealers targeting global gaming communities. Documented in Flashpoint’s 2025 Global Threat Intelligence Report, this malware strain exploits gaming enthusiasts’ trust through socially engineered distribution channels, leveraging double-layered encryption, sandbox evasion, and real-time data exfiltration to compromise credentials at scale. With infostealers…
-
Compliance And Governance: What Every CISO Needs To Know About Data Protection Regulations
The cybersecurity landscape has changed dramatically in recent years, largely due to the introduction of comprehensive data protection regulations across the globe. Chief Information Security Officers (CISOs) now find themselves at the intersection of technical security, regulatory compliance, and organizational risk management. Their responsibilities have expanded far beyond traditional security operations, requiring them to interpret…
-
Are You Free from Secrets Sprawl Worry?
Is your organization truly secure against Secrets sprawl? Cloud-based firms face a growing wave of identity and secrets security challenges. Among these, the phenomenon of Secrets sprawl threatens to jeopardize the integrity of data and IT systems. Unchecked, it opens the door to an array of potential digital threats. But fear not, there is a……
-
Innovations in Non-Human Identity Management
Is Your Enterprise Leveraging NHI Management Innovations? Every organization operating in our interconnected digital era must adopt modern cybersecurity measures to safeguard their data and systems. But how many are aware of the critical role Non-Human Identities (NHIs) play in achieving this? NHIs are machine identities birthed in cybersecurity. These unique identities are a combination……
-
Secure Coding Practices Guide: Principles, Vulnerabilities, and Verification
Discover how proper secure coding practices can prevent costly data breaches and vulnerabilities. This comprehensive guide covers essential security principles, OWASP Top 10 mitigations, and language-specific techniques that every developer needs to implement in their SDLC. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/secure-coding-practices-guide-principles-vulnerabilities-and-verification/
-
Interlock Ransomware Say It Stole 1.5TB of DaVita Healthcare Data
Patients receiving critical kidney dialysis treatment from DaVita, a major healthcare provider, are now facing the possible exposure… First seen on hackread.com Jump to article: hackread.com/interlock-ransomware-stole-davita-healthcare-data/
-
ISMG Editors: Top 2025 Breach Trends From Verizon
Also: Supply Chain Security in Wake of US Tariffs, AI’s Role in the SOC. In this week’s update, ISMG editors discussed takeaways from Verizon’s annual Data Breach Investigations Report, the cybersecurity ripple effects of the disruptive U.S. tariff policy, and why artificial intelligence tools still aren’t ready to take over the security operations center. First…
-
Mobile provider MTN says cyberattack compromised customer data
African mobile giant MTN Group announced that a cybersecurity incident has compromised the personal information of some of its subscribers in certain countries. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/mobile-provider-mtn-says-cyberattack-compromised-customer-data/
-
The Hidden Security Risk on Our Factory Floors
ICS and SCADA (supervisory control and data acquisition) networks were built as isolated systems, never meant to connect to the internet. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/the-hidden-security-risk-on-our-factory-floors/
-
Framework schließt Realitätslücke bei der Datenresilienz
Veeam Software hat das branchenweit erste Data-Resilience-Maturity-Model (DRMM) eingeführt. Das neue Framework versetzt Unternehmen in die Lage, ihre tatsächliche Widerstandsfähigkeit objektiv zu bewerten und entschlossene, strategische Maßnahmen zu ergreifen, um die Lücke zwischen Wahrnehmung und Realität zu schließen und sicherzustellen, dass ihre Daten angesichts der zunehmenden Cyberangriffe und -ausfälle widerstandsfähig sind. Eine von Veeam und…
-
Baltimore City Public Schools data breach affects over 31,000 people
Baltimore City Public Schools notified tens of thousands of employees and students of a data breach following an incident in February when unknown attackers hacked into its network. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/baltimore-city-public-schools-data-breach-affects-over-31-000-people/
-
Commvault warns of critical Command Center flaw
Tags: access, authentication, ciso, cvss, data, exploit, flaw, infrastructure, network, ransomware, vulnerabilityPre-authentication increases exploitability: Heath Renfrow, CISO and co-founder at FEnix24, told CSO that the vulnerability is both “technically serious” and “operationally significant” for organizations, for a number of reasons.For starters, it enables pre-authentication exploitation, meaning that it can be triggered before any authentication is required, leading to high exploitability without the need for credentials. Additionally, the…